|
|
|
|
|
|
|
|
|
Steganography
| Глоссарий терминов по социальной инженерии и информационной безопасности |
The practice of concealing a file within another one. for example, a social engineer might hide a malicious executable inside a jpeg file, which he then emails to his victim. upon clicking a seemingly benign photo, a malicious trojan then gets activated which communicates back to the attacker’s command and control centre. this makes steganography a useful technique for data exfiltration or credential harvesting. steganographic techniques can also be used by rogue employees to exfiltrate data out of an organisation by hiding confidential files, e.g. customer database files that are hidden amongst graphic design files.
|
|
Executable, английский
- A file in portable executable (pe) file format that can be loaded into memory and executed by the operating system loader. it can be either an .exe or a .dll file. in the .net context, a pe file must be translated by the common language runtime into code before it can be executed by the operating system.
- A le that can be executed by the operating system.
Exfiltration, английский
Эксфильтрация air ~ эксфильтрация воздуха
Harvesting, английский
Removing merchantable trees (contrasts with cuttings, which remove immature trees) (17).
Organisation, английский
- An owner or an operator, or a person or a body that is both owner and operator.
- 1. a group of people set up for a particular purpose 2. the planning or arranging of something the organisation of the rota 3. the way in which the component parts of something are arranged
- Организационная структура (компании)
Confidential, английский
- A file or record that is not available for public viewing. authorized viewing allowed only in statute and/or court policy. files and records are identified and receive special handling
- Секретный
- Confidencial
- The lowest classification of material or information which would be harmful to national interests if disclosed. see also “secret” and “top secret.”
- Для служебного пользования
|
Subject access request, английский
Under gdpr, data subjects can now make a subject access request to an organisation for all personal information held on them and an in-depth description of how it is being processed. this request must be met “without undue delay and any event within one month of the receipt of the request”. organisations should have streamlined processes in place to handle such requests smoothly and efficiently. === src="images/icons/information2.png" alt="tab-nabbing"
Spear phishing, английский
Just like phishing, but targeted at a specific person or group. spear-phishing is a highly focused attack with a higher probability of success due to a well-researched pretext. anti-phishing training can make employees more resilient against spear-phishing attacks.
|
|
|
|
|
|
|
